Google Disconnect

[MidasRX]

Hey just wonder why or idk if i aleardy talked abt that but i keep not understand why gmail account are instant disconneted or after 5 min to 15 min and it disconnect and the owner of the original cookie recive a notification abt stolen account if yall know why its doing that or a possible fix ik its not cause of vpn or ip its strange

[gagoatk119]

@MidasRX Do you mean that this happens after using the tool? This is a very serious allegation.
No, the tool is open source, and the code runs internally only; nothing is sent externally.
Perhaps you were hacked and that happened to you. It is impossible — I have been using this tool for six months and have not experienced a problem like this.

[MidasRX]

what the fuck ur yapping abt ? lock in buddy i didnt say abt hacking i said abt that the tool is detected by google and gmail disconnect everything when you log in to the cookie myself

[xaitax]

Hi @MidasRX - not sure but it is likely that Google has heuristics on the login (different country, browser fingerprinting, login history, etc.) and then invalidate the cookies you are using.

[MidasRX]

Thanks for responding i did a research and its been multiple years. Like that i got issue for some reason me google disconnected even without modiffying anything for sus activity i think google detect what ur doing idk how like changing pass of other acc like steam and if he detect that ur speed idk its very strange i think its based on multiple factor there a way t debug why google is disconnecting ?

[MidasRX]

ok thx

[MidasRX]

there no zay to bypass these protection ?

[WANTED-BY-THE-CIA]

To bypass cookie invalidation, set the Expires attribute in your cookie file to +9999 to ensure it remains valid indefinitely. Remember to format the date correctly in the Netscape cookie format.

Additionally, to fully bypass Chrome's detection mechanisms when loading external cookies, it is recommended to use a Firefox browser extension. This helps avoid detection by Chrome when attempting to load cookies from different sources or browsers.

YOU NEED THIS EXTENSION + FIREFOX BROWSER -> TO BYPASS COOKIES + EXPIRE DATE +9999 DAYS

https://addons.mozilla.org/en-US/firefox/addon/cookie-quick-manager/

[MidasRX]

Thanks ! But im aleardy doing this google seem to have à advanced protection

[00nx]

Thanks ! But im aleardy doing this google seem to have à advanced protection

I guess it is due to Googles DBSC , Device Bound Session Credentials. DBSC is designed to prevent session or cookie hijacking.

It binds users session ( gmail and other google services for now ) into specific devices, i dont know much about it but it uses Trusted Platform Module in windows devices.

[MidasRX]

How i could spoof thqt DBSC or bypass looks like the only response that is good @00nx

[00nx]

its done with hardware-backed secure storage and TPM so i dont think there is a bypass YET. browser generates a fresh asymmetric key pair (public + private key) specifically for a session,
Private key is stored in a hardware backed secure storage, and each Each session gets its own unique key pair so it could take awhile to make it working, but MITB could work in this scenario even tho not for extraction purposes

[MidasRX]

Ok i will try to bypass it np> its done with hardware-backed secure storage and TPM so i dont think there is a bypass YET. browser generates a fresh asymmetric key pair (public + private key) specifically for a session,

Private key is stored in a hardware backed secure storage, and each Each session gets its own unique key pair so it could take awhile to make it working, but MITB could work in this scenario even tho not for extraction purposes

[MidasRX]

I would pay if someone can PR a fix to this issue i would pay 20 $ via github sponsors or any other way

[x64assembly]

I would pay if someone can PR a fix to this issue i would pay 20 $ via github sponsors or any other way

This is not responsibility of this repository. This is a repository to show a PoC on how to decrypt app bound key without elevating to SYSTEM user. The fact you can't use the cookies properly is YOUR issue only. Go learn, skid.

[MidasRX]

I would pay if someone can PR a fix to this issue i would pay 20 $ via github sponsors or any other way

This is not responsibility of this repository. This is a repository to show a PoC on how to decrypt app bound key without elevating to SYSTEM user. The fact you can't use the cookies properly is YOUR issue only. Go learn, skid.

nobody asked ur review just stop farming comment saying nonsense and proof that u cant do anything ur mentionning skid but everyone is "skidding" learning ur prob doing nothing than ratting grabbing ppl and getting 1 victim per centuries good luck dont respond to me anymore wasting ppl time